$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json) Hash identifier: 3z3oh0kc7hBYNphigHlnWJ9rXY+iv7fDPnvwACMaOQ4= Subject key identifier: 29:C6:61:6E:6A:6D:4B:82:E6:E3:DE:9B:99:1B:79:8D:F9:B0:84:B1 Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft Manifest number: 33C3 Signing time: Sat 18 May 2024 14:29:45 +0000 Manifest this update: Sat 18 May 2024 14:29:44 +0000 Manifest next update: Sat 25 May 2024 14:29:44 +0000 Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: xKoJmyU6+T6no1q9HgUwmjtrf636kDpNZpcHN/zBn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Validity Not Before: May 18 14:29:44 2024 GMT Not After : May 25 14:29:44 2024 GMT Subject: CN=6648bb58-37e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:c9:69:dc:44:fe:b2:aa:e9:63:1c:89:29: a1:8d:2e:05:09:3c:db:29:88:42:e9:cb:ef:f0:8d: 8f:76:45:fb:da:11:7b:86:65:67:cd:7c:2a:3c:3b: 30:c9:2f:c3:6a:44:05:04:f5:0f:8f:00:38:5a:74: 07:12:06:97:32:49:31:98:a9:e2:42:2a:b0:97:75: e4:ab:7a:33:2b:60:a9:6b:c0:f0:81:74:3d:84:e0: 57:92:27:78:e0:0a:89:a9:e6:a3:48:35:87:eb:2e: b1:eb:cb:1b:03:8e:70:43:3a:20:3d:09:72:05:89: 2d:e0:7d:66:17:eb:ff:fb:77:84:6b:ea:61:59:a4: ea:66:0f:e8:f1:8b:9a:b5:2e:26:5c:4a:b4:af:62: 5c:2b:7d:d6:eb:15:3a:2d:c4:9c:bd:e1:f6:8e:f3: 32:d4:e9:bc:75:db:57:d2:3b:90:62:80:c6:e0:e5: 6b:ed:e2:e6:55:7d:35:60:cc:95:b9:8e:a0:70:26: 21:b5:97:69:d1:e6:30:d2:8b:b0:76:fa:36:f5:2d: 26:24:7d:c2:76:93:5f:7d:fa:d0:88:bf:3b:b6:7d: 1f:39:4b:7b:d6:0e:bf:af:51:03:9e:e4:0e:3d:19: ec:8e:11:11:8b:01:06:b7:db:37:bf:d0:ed:5b:cb: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:61:6E:6A:6D:4B:82:E6:E3:DE:9B:99:1B:79:8D:F9:B0:84:B1 X509v3 Authority Key Identifier: keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:03:6f:16:c2:79:22:99:ab:47:01:a4:39:7a:48:7d:f4:70: f0:be:73:b1:e4:75:5b:28:a2:48:9a:56:1b:4b:52:16:5c:40: 4f:f5:54:f8:9b:24:0e:e9:4e:a0:41:4f:ab:e7:e9:a4:71:f6: 34:c5:12:35:cd:3b:b8:79:32:8c:5a:87:8d:d9:c4:9d:55:3d: 3a:69:31:10:18:f2:0e:7d:44:12:e2:39:12:b2:3e:bb:c6:02: 92:aa:fb:bd:ff:0f:d8:9d:a9:6f:23:6f:fc:12:62:a5:97:96: 36:e2:6e:b8:a6:15:de:6e:f0:c8:d2:3f:7a:46:a3:de:f6:b4: b1:5e:77:2a:1e:9c:0b:ea:44:17:27:d6:1d:b2:9f:61:a3:cb: 93:37:ae:d4:e0:11:da:5b:03:53:dc:df:fc:2d:9b:3f:11:08: 0a:c3:ed:0a:8a:0d:06:e4:dd:ab:4b:f3:fd:34:77:1c:6a:27: 00:ba:ae:e2:f7:66:3d:03:a8:2b:a1:30:d2:cf:ec:e0:94:95: 5b:1b:06:f6:47:54:c4:30:ae:9c:f6:8f:8c:fb:fd:6e:1b:8d: 98:6d:25:1c:66:b8:be:33:7b:03:70:25:ea:5b:a1:1d:16:10: ce:56:30:2a:9e:6d:9e:b5:dc:93:27:4f:90:06:69:5d:de:fd: e8:35:92:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExMTUxMTAvBgNVBAUTKEY1MzhENTk1QTg2NTUzRTlFNjk0N0FDNUU4RkNGQ0NC QzlEQTlCMjEwHhcNMjQwNTE4MTQyOTQ0WhcNMjQwNTI1MTQyOTQ0WjAYMRYwFAYD VQQDEw02NjQ4YmI1OC0zN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OrJadxE/rKq6WMciSmhjS4FCTzbKYhC6cvv8I2PdkX72hF7hmVnzXwqPDsw yS/DakQFBPUPjwA4WnQHEgaXMkkxmKniQiqwl3Xkq3ozK2Cpa8DwgXQ9hOBXkid4 4AqJqeajSDWH6y6x68sbA45wQzogPQlyBYkt4H1mF+v/+3eEa+phWaTqZg/o8Yua tS4mXEq0r2JcK33W6xU6LcScveH2jvMy1Om8ddtX0juQYoDG4OVr7eLmVX01YMyV uY6gcCYhtZdp0eYw0ouwdvo29S0mJH3CdpNfffrQiL87tn0fOUt71g6/r1EDnuQO PRnsjhERiwEGt9s3v9DtW8saPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnGYW5q bUuC5uPem5kbeY35sISxMB8GA1UdIwQYMBaAFPU41ZWoZVPp5pR6xej8/MvJ2psh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTExNS85MTI1NDUwRTFE ODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUtbm1sSHJGNlB6OHk4bmFt eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUalZsYWhsVS1ubWxIckY2UHo4eThuYW15RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTExNS85MTI1NDUwRTFEODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUt bm1sSHJGNlB6OHk4bmFteUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcA28WwnkimatHAaQ5ekh99HDwvnOx5HVbKKJImlYbS1IWXEBP9VT4 myQO6U6gQU+r5+mkcfY0xRI1zTu4eTKMWoeN2cSdVT06aTEQGPIOfUQS4jkSsj67 xgKSqvu9/w/YnalvI2/8EmKll5Y24m64phXebvDI0j96RqPe9rSxXncqHpwL6kQX J9Ydsp9ho8uTN67U4BHaWwNT3N/8LZs/EQgKw+0Kig0G5N2rS/P9NHccaicAuq7i 92Y9A6groTDSz+zglJVbGwb2R1TEMK6c9o+M+/1uG42YbSUcZri+M3sDcCXqW6Ed FhDOVjAqnm2etdyTJ0+QBmld3v3oNZJf -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org